ReportLab XML Blind XPath Injection

The vulnerability of the toColorevalarg function in the ReportLab library is related to an XML document processing error. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

DoS

The vulnerability of the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP implemented in Cisco Video Surveillance devices of the 7000 series is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a perpetrator to cause slow memory leaks, device...

Huawei microprogram memory leak DoS

The vulnerability of Huawei’s microprogramming code in software and hardware devices is related to memory leaks. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

OpenEXR storeSSE Confidential Information DoS

Vulnerability of the storeSSE function in software for storing images with wide dynamic range brightness in OpenEXR format. Exploitation of this vulnerability allows a remote attacker to access confidential information or cause service failures...

Raptor Library Heap Buffer Overflow DoS

The vulnerability of the raptorxmlwriterstartelementcommon component in the Raptor library is related to an incorrect definition of the maximum number of announcements allowed. Exploiting this vulnerability allows a remote attacker to compromise data integrity or cause service failures...

OpenJPEG Buffer Overflow DoS

The vulnerability of the OpenJPEG library for image encoding and decoding is related to the execution of operations within acceptable buffer data limits. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failure...

Poppler PDF Rendering Library Heap Buffer Overflow DoS

The vulnerability of the Object.h component in the Poppler PDF rendering library is related to a lack of implementation for flow control. Exploiting this vulnerability allows an attacker to cause service failures...

ImageMagick ReadXPMImage Buffer Overflow DoS

The vulnerability of the ReadXPMImage function in the coders/xpm.c component of the console-based image editing tool ImageMagick involves allowing the operation to be within acceptable buffer data limits. Exploiting this vulnerability allows a remote attacker to gain access to confidential data,...

fly-admin-date Time Access Control DoS

The vulnerability of the software for setting the time in the fly-admin-date operating system is related to lack of access control. Exploiting this vulnerability allows a perpetrator to cause service failures...

Astra Safepolicy DoS

The vulnerability of the astra-safepolicy security configuration software is related to incorrect data processing in the /etc/fstab file. Exploiting this vulnerability allows an attacker to cause service failures...

Astra Safepolicy DoS

The vulnerability of the astra-safepolicy security configuration software is related to incorrect data processing in the stderr output. Exploiting this vulnerability allows a remote attacker to cause service failures...

RTAS kernel Authentication Bypass

The vulnerability of the RTAS component of the Linux operating system is related to improper handling of memory access. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

IKE Xauth Authentication

The vulnerability related to user authentication within the Xauth protocol of the IKE protocol is linked to improper validation during the file transmission to the program’s input. Exploiting this vulnerability allows an attacker to cause service failures...

QTgaFile Component Resource Management Error DoS

The vulnerability of the QTgaFile component of the cross-platform software development framework for Qt is related to a bug in the resource management mechanism. Exploiting this vulnerability allows an attacker to cause service failures...

fly-admin-int-check Vulnerability Confidential Data Compromise

The vulnerability of the software for regulating the integrity of fly-admin-int-check is related to the improper verification of integrity by unauthorized users. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to confidential data, compromise its...

Crmsh Cluster Privilege Bypass

The vulnerability of the Crmsh cluster management interface is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Libvirt Information Disclosure

The vulnerability of the Libvirt virtualization management library is related to incorrect permission checking. Exploiting this vulnerability allows a remote attacker to access confidential information or cause service failures...

ImageMagick ReadMATImageV4 Heap Buffer Overflow DoS

The vulnerability of the ReadMATImageV4 function in the ImageMagick console graphics editor’s coders/mat.c component is related to the use of previously uninitialized variables. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cau...

QEMU Disasinsn Buffer Overflow DoS

The vulnerability of the disasinsn function in the target/i386/translate.c component of the QEMU hardware emulation software is related to the lack of restrictions on instruction size. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and caus...

Libxml2 Heap Buffer Overflow DoS

The vulnerability of the htmlParseTryOrFinish function in the HTMLparser.c component of the Libxml2 library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service failures...